CVE-2017-10934 - CVE House
Back to Database
Status published Critical CVE-2017-10934

All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product...

Vulnerability Description

All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the Apache Commons Collections (ACC) library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a crafted RMI request to execute arbitrary code on the target host.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-10934

Credits & Attribution

No credits recorded in the NVD database.

References

More from ZTE

View All →
CVE-2025-66315
ZTE MF258K Pro Version Server has a Configuration Defect Vulnerability
Medium 4.3
CVE-2025-66314
Improper Privilege Management vulnerability in ZTE ElasticNet UME R32 on...
High 7.5
CVE-2025-46583
DOS Vulnerability in ZTE MC889A Pro product
Medium 5.3
CVE-2025-46582
Private Key Disclosure Vulnerability in ZTE ZXMP M721 Product
High 7.7
CVE-2025-46581
ZTE ZXCDN product has a Struts RCE Vulnerability
Critical 9.8

Affected Vendor

Affected Software

ZXIPTV-EPG
Vulnerable Versions:
All versions prior to V5.09.02.02T4

Timeline

Official Publish: July 25th, 2018
Last Modified: September 17th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.